This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json) Hash identifier: 9d0jLdMy4hiula9IAZeBZ8ye54t3aypeVa7id3vsb7w= Subject key identifier: 4D:E7:37:FC:D9:05:3C:ED:CD:3C:19:0E:D1:9D:A2:46:DE:5D:55:6A Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Certificate serial: 019C427D9BA5D19BE4EC45B82B702BA8002D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft Manifest number: 1533 Signing time: Mon 09 Feb 2026 13:00:53 +0000 Manifest this update: Mon 09 Feb 2026 13:00:53 +0000 Manifest next update: Tue 10 Feb 2026 13:00:53 +0000 Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: fFiAhLMvMRi+4+sqtQKpWUfXelHlUSDcE4QBZdbB3os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:9b:a5:d1:9b:e4:ec:45:b8:2b:70:2b:a8:00:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Validity Not Before: Feb 9 13:00:53 2026 GMT Not After : Feb 10 13:00:53 2026 GMT Subject: CN=4de737fcd9053cedcd3c190ed19da246de5d556a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:19:35:9d:fc:6e:52:76:c1:77:6f:70:82:dc: cc:b5:29:bd:f9:95:42:75:d4:77:26:a1:d2:92:36: 71:b3:f5:07:a1:b0:90:db:c2:21:17:28:25:08:43: 41:3f:c9:fc:c9:22:cf:ba:52:dd:61:81:12:71:43: ee:79:25:0c:0b:e3:f7:c9:ca:fb:62:6c:74:6f:90: 4f:f7:62:09:26:b5:c6:3d:a2:51:16:97:dc:20:8d: 1e:99:d2:1e:73:bb:8e:df:10:fb:47:67:06:66:c8: 74:55:ca:1d:f4:15:04:83:95:69:5c:de:8e:a2:34: 9a:bc:bd:b3:80:bc:07:e9:b8:c6:47:7e:3b:23:7d: a7:ab:ff:14:8d:7d:2c:e1:5c:f8:c5:d5:17:b0:44: d5:b0:35:ef:ef:f2:78:a3:ab:47:1e:59:05:96:4e: 95:14:70:30:31:9d:15:8b:b4:73:61:a9:96:e7:c5: 90:25:fb:e9:68:b2:3c:9e:d6:bb:49:28:1e:b2:95: 77:f9:45:1b:e0:10:d4:90:cb:f3:9f:b1:3a:42:28: d6:d6:34:1e:47:e6:e9:37:95:45:19:5f:05:27:1f: 31:49:ea:d3:40:bf:20:04:1a:7b:e0:fc:fb:2c:e3: ed:5e:60:fa:14:26:76:c1:34:2e:de:ac:d9:49:ed: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E7:37:FC:D9:05:3C:ED:CD:3C:19:0E:D1:9D:A2:46:DE:5D:55:6A X509v3 Authority Key Identifier: keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:de:a8:76:6a:a2:17:02:13:7e:e5:82:f3:0d:3d:c2:55:5c: 8c:4b:28:f7:91:18:30:67:f3:12:86:8d:77:e0:7b:81:ac:37: 72:bb:8e:bf:2c:dc:b6:21:4d:11:5a:6f:2b:d3:a6:f2:3b:9e: 96:2e:6f:a6:0f:67:c5:4e:be:2e:25:d7:de:4a:07:92:25:b1: d6:ad:8f:0e:d6:60:9a:76:24:17:8b:7f:69:9c:c2:7f:bc:6f: 2b:5d:1d:69:4e:90:a0:6f:df:a6:0d:6b:86:8a:8e:89:66:2a: 5b:89:80:0b:ce:03:90:79:92:30:76:63:91:14:aa:78:83:71: 8b:54:ef:1f:1a:15:f3:72:e4:f4:7e:09:07:33:db:89:98:7d: 4e:79:20:d0:a7:58:4c:7d:2f:77:fb:04:90:dc:ac:76:7f:30: f1:15:8b:4d:93:b7:90:b2:6a:a6:cb:47:a1:4f:11:db:9a:87: ed:c4:ba:3d:31:ab:fd:d8:05:0a:55:e2:f6:5a:24:a4:29:e0: 49:cf:bd:62:87:49:17:74:a7:e8:70:50:22:3c:55:96:81:bd: 74:a9:c0:90:67:71:df:bd:b0:11:2d:08:47:c4:1f:b6:7e:19: 4a:a5:44:8c:56:47:a8:b2:ac:37:66:38:3e:16:0c:55:ff:74: cf:09:e8:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZul0Zvk7EW4K3ArqAAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj YzUzOWQwHhcNMjYwMjA5MTMwMDUzWhcNMjYwMjEwMTMwMDUzWjAzMTEwLwYDVQQD Eyg0ZGU3MzdmY2Q5MDUzY2VkY2QzYzE5MGVkMTlkYTI0NmRlNWQ1NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRk1nfxuUnbBd29wgtzMtSm9+ZVC ddR3JqHSkjZxs/UHobCQ28IhFyglCENBP8n8ySLPulLdYYEScUPueSUMC+P3ycr7 Ymx0b5BP92IJJrXGPaJRFpfcII0emdIec7uO3xD7R2cGZsh0Vcod9BUEg5VpXN6O ojSavL2zgLwH6bjGR347I32nq/8UjX0s4Vz4xdUXsETVsDXv7/J4o6tHHlkFlk6V FHAwMZ0Vi7RzYamW58WQJfvpaLI8nta7SSgespV3+UUb4BDUkMvzn7E6QijW1jQe R+bpN5VFGV8FJx8xSerTQL8gBBp74Pz7LOPtXmD6FCZ2wTQu3qzZSe3jwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3nN/zZBTztzTwZDtGdokbeXVVqMB8GA1UdIwQY MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkt6odmqi FwITfuWC8w09wlVcjEso95EYMGfzEoaNd+B7gaw3cruOvyzctiFNEVpvK9Om8jue li5vpg9nxU6+LiXX3koHkiWx1q2PDtZgmnYkF4t/aZzCf7xvK10daU6QoG/fpg1r hoqOiWYqW4mAC84DkHmSMHZjkRSqeINxi1TvHxoV83Lk9H4JBzPbiZh9Tnkg0KdY TH0vd/sEkNysdn8w8RWLTZO3kLJqpstHoU8R25qH7cS6PTGr/dgFClXi9lokpCng Sc+9YodJF3Sn6HBQIjxVloG9dKnAkGdx372wES0IR8Qftn4ZSqVEjFZHqLKsN2Y4 PhYMVf90zwnoAg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:34 2026 by rpki-client